Right on schedule per David’s annual 2022 Devolutions Roadmap, we are pleased to announce that Devolutions Server 2022.1 is now available!
About Devolutions Server
For those who are new to this solution, Devolutions Server is our full-featured shared account and password management solution, with built-in privileged access management (PAM) functionality. Devolutions Server deploys rapidly, implements easily, and is offered at a price point that is affordable for small and mid-sized businesses (SMBs). A free 30-day trial is available here.
Current Users: An Important Note Before Upgrading
To improve functionality, security, and UX, as well as to support future improvements, we have made some changes to the requirements for using Devolutions Server:
- .NET Framework 4.8 is now required instead of .NET Framework 4.7.2.
- Devolutions Server Console 2022.1 is required.
- Remote Desktop Manager 2022.1 is required.
- Devolutions Gateway now requires a license (unlicensed usage will show a warning).
- HTTPS by default (while not mandatory, it is strongly recommended to elevate your security posture).
We are pleased to offer free sessions to help you upgrade Devolutions Server in your environment. Please click here to book your session with one of our Service Desk Specialists.
What’s New & Improved
We have made multiple improvements in Devolutions Server 2022.1. You can see the complete list of changes in the Release Notes. Below, we highlight some of the biggest enhancements:
New Support for OAuth
You asked and we listened: Devolutions Server 2022.1 now supports OAuth 2.0, the industry-standard protocol for authorization. Azure AD integration is already available and additional OAuth authentication services such as Okta are planned for this year.
Please note: The upgrade to OAuth in Devolutions Server slightly modifies the user authentication flow in Remote Desktop Manager. This will be covered in-depth in an upcoming blog post.
New Location for Devolutions Launcher CALs
Another minor shift: In Devolutions Server 2022.1, Devolutions Launcher CALs must be entered in the Administration → Licenses page. If you have purchased User (individual) licenses, you can assign them to users by clicking the “Edit” icon on the right, then the “Assigned To” tab on the left.
We have worked hard to improve Devolutions Gateway. For those unfamiliar with this module, Devolutions Gateway provides authorized just-in-time access to resources in segmented networks. Key benefits include:
- Reduced exposure to internal network resources with just-in-time RDP connections through the Devolutions Gateway.
- Static VPN and firewall rules replaced with dynamic access rules controlled by Devolutions Server.
- Enhanced security by giving remote access, or access to specific applications, in separate network segments on demand.
- Improved productivity by eliminating the need to update VPN or firewall rules for temporary access.
Devolutions Gateway now offers:
- Support for SSH connections.
- The option to force IP address usage instead of the DNS name. This is for users who experience issues with Kerberos authentication. It is a workaround that temporarily forces a downgrade to NTLM.
- Support for alternate hosts in Remote Desktop Manager, such that Devolutions Gateway tries connecting to alternate hosts when the primary host is unreachable.
To learn more about Devolutions Gateway:
- Download the Use Case [PDF] on how organizations that use RDP can avoid complexity by using Devolutions Gateway.
- Download the Use Case [PDF] on how organizations that use RDP can improve security, performance, and functionality by switching from RD Gateway to Devolutions Gateway.
- Download the Tutorial [PDF] on how to configure Devolutions Gateway.
Note on Devolutions Gateway Licensing
In the Devolutions Server console, users can configure a Devolutions Gateway that is installed side-by-side with Devolutions Server. This is free and supports up to 5 concurrent sessions.
Starting with the next version of Devolutions Server (2022.2), users who want to install Devolutions Gateway in another location (i.e., not side-by-side with Devolutions Server), and/or require support for 6 or more concurrent sessions, will need to purchase a license.
For more information, please contact our sales team at email@example.com.
Privileged Access Management
New PAM Dashboard in Remote Desktop Manager
Many of you have requested a single pane-of-glass connecting Devolution Server and Remote Desktop Manager, and your wish is our command! Now you can monitor, manage, and control privileged accounts directly from within Remote Desktop Manager. There is no need to launch a separate Devolutions Server web interface
New PAM Providers: Local Windows Accounts & Azure AD
Devolutions Server 2022.1 now supports two new PAM providers: Local Windows Accounts and Azure AD. This is in addition to Domain User (AD), Local User (SSH), and SQL User.
Note on PAM Licensing
While it is not new, this is a good time to share a reminder thata license is required to access some advanced PAM features in Devolutions Server, including:
- Privileged session management
- Privileged account discovery
- Secure credential injection
- Automatic and scheduled password rotation
- Privileged session recording
- Checkout request approval
For more information about DVLS-PAM licensing, please contact our sales team at firstname.lastname@example.org.
Devolutions Console Improvements
To improve user experience, we have reworked the Devolutions Server Console to streamline the installation and configuration workflow. For instance, we have renamed some labels, such as “SQL Server Authentication,” making it easier to know which credential pair to provide.
New Recovery Kit
Now in Devolutions Server 2022.1, users can create a Recovery Kit for use in case of emergency, or for a load balancing topology. The Recovery Kit is a .ZIP folder generated by the Devolutions Server console, which contains the encryption keys and a response file. We highly recommend creating a Recovery Kit and keeping it in a secure yet easy-to-remember location.
Response File Loading
Users can also load the response file if they need to re-install Devolutions Server with the same specifications as the initial install. The response file is located in the Recovery Kit .ZIP folder.
Send Us Your Feedback
Please tell us what you think of Devolutions Server 2022.1. Let us know what you like, what you dislike, and what you would like us to change, add, remove, or fix. We are always listening to you, and your advice will help us make Devolutions Server (and Devolutions Gateway) better for you and other users around the world.